There really only seems to be two ways to fix this.
1) Store an encryption key in a .php file, similar to password.php. This key is then used to encrypt/decrypt the plain text configuration file.
2) Store the entire configuration as a valid .php file.
Option 2 should be simpler. We can just wrap the text into a variable.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
There really only seems to be two ways to fix this.
1) Store an encryption key in a .php file, similar to password.php. This key is then used to encrypt/decrypt the plain text configuration file.
2) Store the entire configuration as a valid .php file.
Option 2 should be simpler. We can just wrap the text into a variable.
This is related to CVE-2005-1136